Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
File:                     BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json)
Hash identifier:          uFE2BS8FYDxYGtltSVPvD+4vN7RVieYO0Cnb+dX4BW8=
Subject key identifier:   74:2B:1C:1B:3F:8C:5A:98:9F:AA:87:65:49:26:22:B0:FC:20:17:CA
Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF
Certificate issuer:       /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
Certificate serial:       1343
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
Manifest number:          132B
Signing time:             Mon 22 Jun 2026 16:58:37 +0000
Manifest this update:     Mon 22 Jun 2026 16:58:37 +0000
Manifest next update:     Mon 29 Jun 2026 16:58:37 +0000
Files and hashes:         1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: GasIdY+YZXwl+SOngJfRyRp3iP1un4tFUjaiJPjDQaM=)
                          2: 35615A30C84511ED90A61540C4F9AE02.roa (hash: ikwRwX6HznSAvB0gllaQ7OaCqCsraBq8/S0KLelO+q8=)
                          3: 3489528EC84511ED90A61540C4F9AE02.roa (hash: IAHu/i87YCurf7TsutZ4NJzzxkW8+ff7z519ukOdfYo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl
                          rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 16:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4931 (0x1343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF
        Validity
            Not Before: Jun 22 16:58:37 2026 GMT
            Not After : Jun 29 16:58:37 2026 GMT
        Subject: CN=6a3969bd-d7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:39:b8:5c:3a:74:78:fe:85:0c:f7:a6:e6:
                    ec:77:a6:9e:6b:08:cf:18:4e:28:0b:5b:05:92:c1:
                    e9:6d:c6:7f:79:23:85:1d:d3:88:41:09:71:08:b9:
                    17:6c:b5:3f:33:c1:8e:0b:f1:3b:c3:5c:95:9b:d4:
                    c6:56:69:14:3c:a9:4b:5d:27:50:49:5b:30:3a:5b:
                    95:14:b8:58:50:8b:07:70:ae:29:80:9e:5e:52:02:
                    2a:10:a8:f9:d7:1e:27:0f:95:47:8e:23:2c:ae:23:
                    47:14:02:6c:34:c3:62:14:fe:c5:f8:97:0f:46:4d:
                    64:1a:cc:cb:c8:74:ec:2a:99:d3:85:5f:a5:d4:d4:
                    da:bf:88:8c:54:d1:25:e4:2f:3d:37:be:fc:05:59:
                    45:2d:bd:bf:f8:59:56:3e:ad:2c:fa:51:bf:77:fe:
                    2f:60:84:b8:2a:9a:37:81:f3:b9:1e:95:fe:d8:60:
                    46:e6:6e:7b:34:ed:09:d7:32:cf:a3:6d:a9:49:dc:
                    06:7a:ee:e0:7d:39:31:a0:3b:37:8f:d8:5f:a5:62:
                    0d:6c:2f:cf:0f:de:45:ae:d7:60:32:fa:ef:bc:2b:
                    9e:8e:84:f3:0d:65:d0:52:bb:5c:bd:ca:5a:d1:81:
                    38:dd:b4:65:09:3b:8c:3a:ea:2b:b1:70:cf:76:b3:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2B:1C:1B:3F:8C:5A:98:9F:AA:87:65:49:26:22:B0:FC:20:17:CA
            X509v3 Authority Key Identifier:
                keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:2c:a9:81:27:6c:42:ea:4a:c8:5f:a4:49:88:6a:b8:a2:
         4c:3e:fc:14:8c:a4:0f:44:f5:c6:00:9c:c9:e2:e6:30:ff:63:
         fb:e9:57:12:c5:83:bf:c1:7c:50:93:23:6c:d6:45:01:8c:c2:
         78:8d:05:55:eb:2b:3f:0d:3b:44:43:67:2c:41:a4:c8:c2:13:
         10:02:90:46:ab:8b:b1:00:75:e1:8e:a7:e9:fb:70:dc:9e:23:
         4a:5f:3d:92:b7:66:74:96:3a:ce:2f:9e:4f:9b:fb:21:41:db:
         36:aa:00:2c:1a:3e:3e:da:32:e9:47:01:05:c3:9e:fe:1d:18:
         1a:04:56:6d:33:1f:9a:15:64:92:a7:c9:63:5a:b6:11:0c:cb:
         61:fa:2c:3c:c6:a4:53:3e:b6:fd:00:95:b7:f9:49:44:11:9c:
         c3:11:51:e3:08:5b:1b:fa:20:9e:06:d3:e3:a4:74:49:4e:04:
         0c:6d:94:38:77:50:e6:43:dc:58:e2:52:66:f8:e0:c1:d3:59:
         33:8e:84:7e:dd:ca:59:d6:5d:18:c2:0b:03:19:a2:e8:f9:a9:
         11:01:24:71:6e:65:26:54:c9:52:a1:51:f8:f6:ea:cb:bd:a5:
         70:ff:a8:77:66:e4:c8:fc:cc:ef:a7:96:80:cd:ff:e3:46:cb:
         32:7d:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:24:38 2026 by rpki-client